N. Korean defectors show locations of mass graves using Google Earth

Much of what happens in North Korea remains hidden from the outside world. But commercial satellite imagery and Google Earth mapping software are helping a human-rights organization take inventory of the worst offenses of the North Korean regime and identify sites for future investigation of crimes against humanity. A new report from the South Korea-based Transitional Justice Working Group (TJWG) —a non-governmental organization that tracks human-rights abuses and crimes against humanity by the world’s most oppressive regimes—details how the organization’s researchers used Google Earth in interviews with defectors from North Korea to identify sites associated with mass killings by the North Korean regime. Google Earth imagery was used to help witnesses to killings and mass burials orient themselves and precisely point out the locations of those events. Entitled “Mapping Crimes Against Humanity in North Korea: Mass Graves, Killing Sites and Documentary Evidence,” the report does not include the actual locations of what the researchers deemed to be sensitive sites out of concern that the North Korean regime would move evidence from those sites. But it does provide location data of other sites with potential documentary evidence of crimes, including police stations and other government facilities that may have records of atrocities. Read 5 remaining paragraphs | Comments

View article:
N. Korean defectors show locations of mass graves using Google Earth

New Guillermo del Toro movie looks beautiful and terrifying

The Shape of Water looks magical, disturbing, and weirdly romantic. Though Guillermo del Toro took Hollywood by storm with movies like Hellboy and Pacific Rim , he truly made his mark with gothic indies like the Oscar-winning Pan’s Labyrinth and the sumptuous Crimson Peak . Now he’s back with The Shape of Water , another intimate look at the inner lives of monsters and the humans who love them. Anyone who has been immersed in del Toro’s lush, magical films knows he’s a master of design, especially when it comes to creatures. Nearly all of his movies deal with the idea that monsters are better people than their human counterparts, and he always manages to get us to identify with giant hellbeasts and gore-soaked ghosts. Though del Toro’s monsters have always been mesmerizing and gorgeous, The Shape of Water is the first of his movies to deal overtly with a human falling in love with one of these otherworldly creatures. Like Pan’s Labyrinth and Crimson Peak , The Shape of Water is also a period piece. Set in the early 1960s during the Cold War, it’s about Elisa (Sally Hawkins), a mute janitor working at what seems to be a top-secret government facility. She’s assigned to clean a lab where the government has imprisoned a beautiful, intelligent fish-like man (Doug Jones), sort of a glimmering cross between the Creature from the Black Lagoon and Aquaman. Read 3 remaining paragraphs | Comments

Read the original post:
New Guillermo del Toro movie looks beautiful and terrifying

Hacker Steals $30 Million Worth of Ethereum From Parity Multi-Sig Wallets

An anonymous reader quotes a report from Bleeping Computer: An unknown hacker has used a vulnerability in an Ethereum wallet client to steal over 153, 000 Ether, worth over $30 million dollars. The hack was possible due to a flaw in the Parity Ethereum client. The vulnerability allowed the hacker to exfiltrate funds from multi-sig wallets created with Parity clients 1.5 and later. Parity 1.5 was released on January 19, 2017. The attack took place around 19:00-20:00 UTC and was immediately spotted by Parity, a company founded by Gavin Wood, Ethereum’s founder. The company issued a security alert on its blog. The Ether stolen from Parity multi-sig accounts was transferred into this Ethereum wallet, currently holding 153, 017.021336727 Ether. Because Parity spotted the attack in time, a group named “The White Hat Group” used the same vulnerability to drain the rest of Ether stored in other Parity wallets that have not yet been stolen by the hacker. This money now resides in this Ethereum wallet. According to messages posted on Reddit and in a Gitter chat, The White Hat Group appears to be formed of security researchers and members of the Ethereum Project that have taken it into their own hands to secure funds in vulnerable wallets. Based on a message the group posted online, they plan to return the funds they took. Their wallet currently holds 377, 116.819319439311671493 Ether, which is over $76 million. Read more of this story at Slashdot.

Read More:
Hacker Steals $30 Million Worth of Ethereum From Parity Multi-Sig Wallets

NASA is putting hundreds of historical videos on YouTube

As part of its mission to make its research easier to access, NASA is uploading decades’ worth of archived footage to YouTube. So far around 300 videos have been uploaded, with a further 200 on the way. Each clip documents an important part of NASA’s history, including Space Shuttle landing research, X1 and X43A trial flights and the testing of the Lunar Landing Research Vehicle. SpaceX chief Elon Musk has previously commented on how difficult it was to find historical footage on NASA’s website. Before the uploading project, curious flight-fans would have to laboriously search through the Dryden Aircraft Movie Collection via the Dryden Flight Research Center website. Standard search queries in Google would reveal nothing. Now, with the video library prominently on the (renamed) Armstrong Flight Research Center’s website and YouTube channel , everyone has easy access to these fascinating historical highlights. Via: Motherboard Source: Armstrong Video Gallery

More:
NASA is putting hundreds of historical videos on YouTube

Hackers can take control of your Segway hoverboard

We can list so many reasons why you should never set foot on a hoverboard . Now, we’ve got yet another: Cybersecurity company IOActive has figured out how to hijack the Segway MiniPro ” self-balancing personal transporter ” through its Bluetooth connection. It seems like only yesterday that we were discussing how hoverboards had a tendency to spontaneously combust and wondering who exactly was actually buying these products. But clearly some of you out there are interested, because Segway has kept cranking them out. The MiniPro, which retails for $600, allows for remote control of the hoverboard-scooter hybrid (seriously, who thought this was a good idea?) through a Bluetooth app. And there’s no way to turn off the Bluetooth if your hoverboard is hacked. While people can’t cause battery explosions (I guess we should be thankful for the little things), “an attacker could bypass safety systems and remotely take control of the device, including changing settings, pace, direction, or even disabling the motor and bringing it to an abrupt and unexpected stop while a rider is in motion, ” says the press release . Hackers could even track and discover the location of the hoverboard user through this exploit. IOActive did let Segway know about these issues (they discovered them last year; results were partially released today), and they have patched some of the vulnerabilities in the product. Still, this is an increasing problem as devices are becoming more connected . Without proper security (or let’s be honest: even with it), these devices and their users are incredibly vulnerable. At this point, not implementing security for connected devices is shoddy at best and dangerous at worst. Via: CNet Source: IOActive

Read this article:
Hackers can take control of your Segway hoverboard

Reebok’s new foam space boots bring comfy kicks to astronauts

Whether it’s using corn to make sustainable sneakers , or 3D printing some pretty out there looking footwear, Reebok isn’t afraid of taking bold new steps with its shoes. Now, however, it looks like the brand has decided to take one giant leap for mankind. On Tuesday, Rebook revealed that it’s developing a new type of shoe for an upcoming mission to the International Space Station. Christened The Floatride Space Boot SB-01, Reebok’s latest is looking to replace the tough and tragically uncool leather boots that have cramped astronauts’ feet (and style) for years. The reason for calling on Rebook to make the wrestling boot-esque Floatride is that Boeing is sending its astronauts to the ISS clad in a shiny new lightweight space suit. Like with any solid new outfit, Boeing has decided that these spacemen’ll need fresh new kicks to match. The sci-fi-looking space boot uses Reebok’s Floatride foam, which adds an extra layer of cushioning to the midsole without adding extra weight to the shoe. This latest tech is used in the brand’s latest sneakers too, the Floatride Run. In an interview with Digital Trends , Reebok’s Vice president of Innovation, Dan Hobson describes The Floatride as “a hybrid of a runner, sandal, wrestling boot, and aviator boot.” Unfortunately, the verdict is still out on the SB-01s with Astronauts currently testing the new kicks. Still, with the classic space boot not seeing an update in the last fifty years, we’re sure that these comfy-looking new shoes will be a welcome sight for many achy astronauts. Source: Designboom

See more here:
Reebok’s new foam space boots bring comfy kicks to astronauts

Exploit Derived From EternalSynergy Upgraded To Target Newer Windows Versions

An anonymous reader writes: “Thai security researcher Worawit Wang has put together an exploit based on ETERNALSYNERGY that can also target newer versions of the Windows operating system, ” reports Bleeping Computer. “ETERNALSYNERGY is one of the NSA exploits leaked by the Shadow Brokers hacking group in April this year. According to a Microsoft technical analysis, the exploit can allow an attacker to execute code on Windows machines with SMB services exposed to external connections. The exploit works up to Windows 8. According to Microsoft, the techniques used in the original ETERNALSYNERGY exploit do not work on newer platforms due to several kernel security improvements. Wang says his exploit targets the same vulnerability but uses a different exploitation technique. His method ‘should never crash a target, ‘ the expert says. ‘Chance should be nearly 0%, ‘ Wang adds.” Combining his exploit with the original ETERNALSYNERGY exploit would allow a hacker to target all Windows versions except Windows 10. This is about 75% of all Windows PCs. The exploit code is available for download from Wang’s GitHub or ExploitDB. Sheila A. Berta, a security researcher for Telefonica’s Eleven Paths security unit, has published a step-by-step guide on how to use Wang’s exploit. Read more of this story at Slashdot.

View article:
Exploit Derived From EternalSynergy Upgraded To Target Newer Windows Versions

Bosch took us for a ride in its level 3 autonomous car

Bosch provided flights to Frankfurt and three nights’ accommodation for this trip to the Bosch Mobility Experience. Video edited by Jennifer Hahn. (video link) BOXBERG, GERMANY—Are autonomous cars like buses? In one way, yes. You wait ages for a ride in one, and then all of a sudden several show up in short succession. In late June,  we went for a spin in Jack , Audi’s level 3 autonomous test vehicle. Then, a couple of weeks later in Germany at the Bosch Mobility Experience, we got to sample another such vehicle. Read 14 remaining paragraphs | Comments

View post:
Bosch took us for a ride in its level 3 autonomous car

Leaked memo says hackers may have compromised UK power plants

State-sponsored hackers have “probably compromised” the UK’s energy industry. A leaked memo from the National Cybersecurity Centre (NCSC) identifies links “from multiple UK IP addresses to infrastructure associated with advanced state-sponsored hostile threat actors.” These threats are “known to target the energy and manufacturing sectors, ” the document says. The memo, obtained by Motherboard and verified by a number of sources, goes on to say that as a result of these connections, “a number of industrial control system engineering and services organisations are likely to have been compromised.” The NCSC has neither confirmed nor denied the authenticity of the memo. However, in a statement given to the BBC it said: “We are aware of reports of malicious cyber-activity targeting the energy sector around the globe … We are liaising with our counterparts to better understand the threat and continue to manage any risks to the UK.” The leaked memo follows claims that Russian hackers have tried to infiltrate America’s nuclear power industry via phishing emails, as well as allegations that Ireland’s Electricity Supply Board has been targeted by groups with links to the Kremlin. These reports appear to be connected, suggesting there may be a large-scale effort brewing to identify vulnerabilities in global energy industry. It appears that despite the hack no actual damage has been done, but we’ve seen the consequences of cyberattacks on critical infrastructure — this development will no doubt call into question the effectiveness of national security once again. Via: The Guardian Source: Motherboard

Taken from:
Leaked memo says hackers may have compromised UK power plants

New ‘Dungeons & Dragons’ site manages the rules so you can just play

Dungeons & Dragons , the quintessential pen-and-paper game, is more popular than ever, thanks to Twitch channels like Geek and Sundry and podcasts like The Adventure Zone . But it’s one thing to listen or watch a presentation crafted by seasoned gamers and another to actually run your own adventure. Players may get frustrated by the hundreds of pages of rules and quit before they’ve even had their first goblin encounter. Wizards of the Coast and social gaming firm Curse aim to fix this with the launch of D&D Beyond , a website and app intended to take care of all the fine print and number crunching, leaving dungeon masters and players free to focus on crafting a good story. While Curse specializes in video game add-ons and communities, D&D Beyond is a different kind of project — a digital companion for a tabletop game. At launch it will mostly consist of a compendium of the rules and world information from D&D ‘s fifth edition, broken down into sections like “spells” and “monsters” that can be either browsed in a list or searched, with plenty of filters to narrow down the exact information required. The current Player’s Handbook and Dungeon Master’s Guide may give you all the information you need to play an adventure, but anyone who’s ever used the books can attest to how hard it is to find anything in them. Many players end up turning to outside wikis and forums to get the information they want instead. Wizards of the Coast has tried over the years to provide some limited online help: Dungeons & Dragons has had digital content since its second edition, and the tools provided for the fourth edition did rather well with players. One thing all of these sites had in common is that they’ve always been meant as a supplement to the game — you still needed to buy the books to play. The eventual goal is for D&D Beyond to completely replace the physical books. That doesn’t mean paper devotees are out of luck — the guides will stay in print as long as there’s demand. But players who prefer to keep everything on their computer or phone will have an official way to do that. While seasoned players will appreciate things like easier-to-access game minutia, it’s newbie adventurers who will benefit the most. For example, character creation has been boiled down to a step-by-step process on the Beyond site that walks you through choosing a race, class and so forth. I used the builder to make an elven ranger and was impressed with how easy it is: After each selection it’ll give you drop-downs for things like expertises and languages, with the weapons and armor you can use clearly marked. When I copied my gnome bard from the game I currently play with friends, it actually showed me a few skill roll bonuses I had missed when I leveled up my character by hand. The sheer complexity of Dungeons & Dragons is what’s made it so hard to build effective digital tools for it, but Project Lead Adam Bradford notes that it’s not the depth that makes it so hard to digitize but the breadth. The game is an open world, ultimately only limited by the imagination of its players. The rules are written as a guide, not a rigid framework for adventurers to operate in. To support freedom of ideas the site allows plenty of manual input, ranging from things as mundane as dice rolls to full-blown homebrew content that can be uploaded to the site’s database. There’s an entire section dedicated to sharing user-generated content where gamers can upvote the best submissions and add anything they find to their “collection.” Even with so much of the game experience being moved online, Curse still envisions people sitting around a table to play Dungeons & Dragons , just with their laptops in front of them. Even if the entire game is run through Beyond, with future iterations of the site keeping track of combat turns, attacks and statuses, players will still need to talk to one another to describe what’s happening. The company also sees the site as a way to make the game more accessible when you’re not playing. When you’re at work or in class you can look at your character, browse for new spells and read backstory anytime you want. By making those little things more accessible during downtime, the actual play sessions can be focused on story, socialization and performance. The idea of Dungeons & Dragons as performance hasn’t always been a prominent part of the brand. Sure, you’re trying to amuse yourself and your friends, but no one was really playing for an audience outside gaming conventions. Now you can watch seasoned players run through campaigns like the Penny Arcade’s Acquisitions Inc. video series. Curse wants to help that phenomenon grow, especially after its sale to Twitch last year. You need a Twitch account to sign up for D&D Beyond, because the company has big plans down the line for integrating D&D campaigns into the streaming site. The idea is that when you set up a stream it’ll be connected to the Beyond page for that particular campaign, displaying relevant infographics on the screen to give viewers a better idea of what’s going on. This will include interactive elements — each player will have her character name displayed, which can be moused over to look at that character sheet — and animations for things like spells or statuses. Games will look a lot more professional, and with most of the rules crunching going on behind the curtain, they will be a lot more entertaining to watch, with an increased emphasis on performance. Features like interactive Twitch streams and the ability to run games completely through the site are big tasks, but Bradford says Curse is in it for the long haul. The first step is to get dungeon master tools up and running later this year, like combat and initiative tracking. There’s been a lot of demand for encounter building — that is, designing battles against monsters and other foes. Encounters form the core of Dungeons & Dragons gameplay, with a typical session usually structured around one or two big battles. Wizards of the Coast sells predesigned adventures, but some players prefer something more customized to their group, especially if they have the type of friends who tend to step outside the box. Beyond will let dungeon masters tweak existing monsters and build entirely new ones: As an example Bradford mentioned a Challenge Rating 12 Mind Flayer that had been separated from its colony. It would be weaker, but how would a player modify its stats? Beyond can eliminate the guesswork, even taking into account small things like how carrying certain magical items might affect the creature. Unfortunately, these tools won’t be ready when Beyond comes out in August. Everything introduced in the current beta is what players should expect at launch. That’s the compendium, character builder and spell book, which will be available free of charge to registered users. Nothing needed to play will be locked away behind a paywall. Instead, the premium tiers will have features that make the site more useful, like the ability to store unlimited characters or use homebrew content. The site will also offer a lot of onetime purchases, like guides and special character classes. Dungeon masters who opt into the most expensive Master Tier will be able to share this content with their players with a click. It certainly beats having to carry around a backpack full of source books to every session. Of course, some people like carrying around heavy bags of books and arguing about attack bonuses. Nothing has to change for them. But for players who really care about collaborative storytelling and love performing, D&D Beyond could be the push they need to give tabletop role-playing a try. It makes Dungeons & Dragons less about the math and more about being someone else for a little while.

More:
New ‘Dungeons & Dragons’ site manages the rules so you can just play